{
  "id": 8696288,
  "title": "Reαd carefully: how to spot – and avoid – a homoglyph attack",
  "url": "https://urgent.news/2026/09/20/re-d-carefully-how-to-spot-and-avoid-a-homoglyph-attack-8696288",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-20T06:00:07.000Z",
  "source": {
    "name": "Guardian Technology",
    "slug": "guardian-technology",
    "url": "https://www.theguardian.com/money/2026/sep/20/how-to-spot-avoid-homoglyph-attack-scam"
  },
  "original_language": "en",
  "account": "Scam emails are becoming more sophisticated, often employing psychological tactics like using characters that closely resemble legitimate ones. For instance, scammers might use the Cyrillic \"α\" instead of the regular \"a\" in an email address or a website URL. This can make it difficult for users to spot the deception, as the altered character may appear identical at first glance.\n\nThese attackers leverage similar-looking characters across different alphabets to craft URLs and email addresses that mimic the genuine ones, ultimately redirecting users to fraudulent websites. Such websites can then collect personal information from unsuspecting victims.\n\nTech experts have observed fraudsters using the Japanese hiragana character \"ん\" to resemble a forward slash (/) in URLs, making them appear as though they lead to reputable sites like Booking.com. Cybersecurity experts warn that scams targeting the Microsoft brand are particularly prevalent. They may substitute the Latin \"c\" with the Cyrillic \"с\" in a URL, like \"miсrosoft.com.\"\n\nHomoglyph attacks are becoming more common because they often bypass traditional security measures. Instead of relying on attachments that can be easily detected by security software, these attacks focus on creating convincing websites that encourage users to click on malicious links.\n\nThese scams primarily rely on psychological manipulation, aiming to instill a sense of urgency or panic in victims to prompt quick actions without thorough scrutiny. By exploiting the split-second decision-making process when clicking links, scammers hope to deceive users into providing sensitive information.\n\nEmails or messages requesting immediate action, such as clicking a link or providing login credentials, should be approached with caution. It's advisable to independently visit the legitimate website rather than relying on the link provided in the message. Similarly, when dealing with email addresses, it's safer to manually input the correct address rather than clicking on a link.\n\nEnsuring your browser is up-to-date can help flag suspicious websites and protect against the latest fraud tactics. Additionally, implementing two-factor authentication (2FA) or multifactor authentication (MFA) adds an extra layer of security when logging into accounts. If you suspect a phishing attack, promptly change your passwords and report the incident to your bank and relevant authorities.",
  "summary": "Scam emails are increasingly using psychological tricks, such as using near-identical URLs like miсrosoft.com You’ve read the email carefully and it looks legitimate. The link it asks you to click on has none of the usual red flags: there are no weird numbers or extra parts to the URL. You feel safe to proceed. But if you had looked slightly closer you may have noticed something slightly wrong…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}